I try to explane: 1. I try user input like: <script>alert('Hi')</script> (i want to prevent execution code and use escapeHtml replacement) - is OK. after blur 2. I try user input like: some text where I must have > 0 (i want to prevent execution code and use escapeHtml replacement) - this is not OK after blur   so in case 2 i have "all data > 0" , which is an internal function showing all data in a certain list and replaceme